Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bxwKRwbRr2YBzr2P0aEvdmei5zg.roa
File: bxwKRwbRr2YBzr2P0aEvdmei5zg.roa (raw, json)
Hash identifier: rtE4aEwJ00MzIgELM1LYZix52HZDSRAAJ0EsQHRgm3I=
Subject key identifier: 6F:1C:0A:47:06:D1:AF:66:01:CE:BD:8F:D1:A1:2F:76:67:A2:E7:38
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 086A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bxwKRwbRr2YBzr2P0aEvdmei5zg.roa
Signing time: Wed 14 Jun 2023 08:54:06 +0000
ROA not before: Wed 14 Jun 2023 08:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6F1C0A4706D1AF6601CEBD8FD1A12F7667A2E738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:b6:e5:a5:f1:aa:dc:97:0e:ce:77:25:25:
b8:da:1a:93:5b:18:9e:e7:8e:cd:ed:e7:08:9b:43:
c4:e0:8c:d2:cb:2b:cd:a7:ec:d3:9e:0b:3b:ec:6e:
59:42:76:5c:aa:d3:e1:7a:57:18:b3:1c:d1:aa:56:
8c:0d:b7:96:cf:88:ea:29:ac:14:72:6a:33:5d:f5:
5c:6a:79:22:15:f8:a1:33:c9:02:3b:7c:d6:35:78:
72:d6:53:ac:83:36:6a:93:05:4b:8d:fa:c7:36:e7:
00:ee:93:ae:16:15:45:a5:c9:07:6e:2f:05:e8:5b:
46:15:d3:9b:a7:28:69:5b:3d:d0:35:23:d2:16:a0:
56:8a:67:c4:a1:27:d8:e4:57:6c:17:26:99:c4:3d:
da:69:45:f2:d1:c5:a9:db:d9:46:51:7f:be:61:c8:
d5:57:77:a7:95:95:28:0f:43:dd:9d:8a:7f:f1:f8:
e1:bc:b8:38:9d:81:fc:dc:a3:d5:0a:da:a5:40:03:
ea:5a:41:d7:c7:84:81:47:36:57:a4:e8:c4:e7:b1:
03:9a:12:a8:db:63:84:e4:29:a1:c1:6d:ab:53:8c:
ea:86:45:c8:25:4b:0e:7f:40:c2:af:2f:fb:61:a4:
9a:15:1b:37:ab:31:61:57:3e:b0:62:87:f6:a2:cd:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:0A:47:06:D1:AF:66:01:CE:BD:8F:D1:A1:2F:76:67:A2:E7:38
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bxwKRwbRr2YBzr2P0aEvdmei5zg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
91:4b:75:35:3b:17:21:41:c8:11:2e:c1:93:b4:43:7a:87:cc:
45:e0:a2:d3:06:89:4c:2d:23:11:98:56:aa:e5:1b:cf:c8:7a:
0c:b8:07:cf:ae:a2:21:65:5b:2d:3d:5a:99:af:12:9c:e4:08:
29:d8:76:df:38:c9:db:93:6c:da:7e:6b:99:a4:31:4e:45:43:
99:4e:02:e8:e7:ca:1d:f3:bc:b4:d7:d6:dc:b2:74:e5:a3:5c:
b9:7f:01:cb:e1:ef:71:26:ca:da:9d:57:98:8a:b1:79:e8:32:
07:a9:d4:43:38:b6:37:af:86:34:e9:9e:dc:d9:1f:b2:7c:6e:
4a:98:9d:fd:53:0a:64:96:a8:9f:01:51:dc:fb:4d:1c:f4:ac:
df:39:df:0e:e0:4d:15:20:b7:ff:58:5d:66:8e:7c:c0:bd:0c:
8b:dc:e7:a0:82:17:f5:f3:f6:ad:1c:da:50:77:b8:43:71:f8:
74:e6:3e:50:55:6e:b4:d6:d3:62:04:b9:cf:b0:0e:e7:e9:3c:
d4:9b:1d:08:e4:b9:93:66:f5:23:9f:76:f2:23:30:2e:d4:2d:
8d:78:3e:7c:37:7d:39:d7:16:68:d3:cb:a8:80:54:91:aa:19:
ce:47:2b:ff:1f:02:cb:f9:b1:46:bc:de:96:6d:70:55:e1:36:
01:29:40:4d
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
ODU0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDZGMUMwQTQ3MDZEMUFG
NjYwMUNFQkQ4RkQxQTEyRjc2NjdBMkU3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHV7blpfGq3JcOznclJbjaGpNbGJ7njs3t5wibQ8TgjNLLK82n
7NOeCzvsbllCdlyq0+F6VxizHNGqVowNt5bPiOoprBRyajNd9VxqeSIV+KEzyQI7
fNY1eHLWU6yDNmqTBUuN+sc25wDuk64WFUWlyQduLwXoW0YV05unKGlbPdA1I9IW
oFaKZ8ShJ9jkV2wXJpnEPdppRfLRxanb2UZRf75hyNVXd6eVlSgPQ92din/x+OG8
uDidgfzco9UK2qVAA+paQdfHhIFHNlek6MTnsQOaEqjbY4TkKaHBbatTjOqGRcgl
Sw5/QMKvL/thpJoVGzerMWFXPrBih/aize+HAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUbxwKRwbRr2YBzr2P0aEvdmei5zgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvYnh3S1J3YlJyMllC
enIyUDBhRXZkbWVpNXpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAkUt1NTsXIUHIES7Bk7RDeofMReCi
0waJTC0jEZhWquUbz8h6DLgHz66iIWVbLT1ama8SnOQIKdh23zjJ25Ns2n5rmaQx
TkVDmU4C6OfKHfO8tNfW3LJ05aNcuX8By+HvcSbK2p1XmIqxeegyB6nUQzi2N6+G
NOme3NkfsnxuSpid/VMKZJaonwFR3PtNHPSs3znfDuBNFSC3/1hdZo58wL0Mi9zn
oIIX9fP2rRzaUHe4Q3H4dOY+UFVutNbTYgS5z7AO5+k81JsdCOS5k2b1I5928iMw
LtQtjXg+fDd9OdcWaNPLqIBUkaoZzkcr/x8Cy/mxRrzelm1wVeE2ASlATQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org